CVE-2017-16875

High

Description

An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. The ioqueue component may issue a double key unregistration after an attacker initiates a socket connection with specific settings and sequences. Such double key unregistration will trigger an integer overflow, which may cause ioqueue backends to reject future key registrations.

SeverityHigh

CVSS7.5

Exploit probability—

ProductTeluu Pjsip

PublishedNov 17, 2017

First seenNov 17, 2017

How to fix

Update

teluu pjsip2.7.1 or later

Vendor advisories

debian.org/security/2018/dsa-4170

Affected products

Product	Affected versions	Fixed in
teluu pjsip	v < 2.7.1	2.7.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.